Bitsight Data and the Splunk Common Information Model Mapping – Bitsight Knowledge Base

Bitsight findings are mapped to the Splunk Common Information Model, which links the Bitsight findings to default views in Splunk.

Bitsight Risk Vector	Splunk Model
Compromised Systems	Intrusion Detection Malware
Open Ports Web Application Headers Server Software	Endpoint Ports
TLS/SSL Certificates	Certificates
Patching Cadence	Vulnerabilities
Potentially Exploited Insecure Systems	Web
SPF Domains DKIM Records DNSSEC	Network Resolutions (DNS)

February 3, 2023: Removed Security Incidents and Exposed Credentials from included risk vectors.
July 10, 2020: Published.

Related articles